Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: JaNhoHxDB4HABGkhGDT7tChq9YeilxfxurIfcIUMRcs=
Subject key identifier: E4:0E:B7:6F:B4:43:60:AC:9D:C5:0F:35:6A:55:3E:49:3F:23:AA:A1
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 019677C3C6CB86834C1822C11CFCECAF66F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 151C
Signing time: Sun 27 Apr 2025 15:00:41 +0000
Manifest this update: Sun 27 Apr 2025 15:00:41 +0000
Manifest next update: Mon 28 Apr 2025 15:00:41 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: TRmKhxcZv/uJ48i6VmmrE2iKaHFfp+EBIlhVFD5XWsY=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:c6:cb:86:83:4c:18:22:c1:1c:fc:ec:af:66:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Apr 27 15:00:41 2025 GMT
Not After : Apr 28 15:00:41 2025 GMT
Subject: CN=e40eb76fb44360ac9dc50f356a553e493f23aaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:28:18:a6:99:32:2e:99:12:92:7f:ca:42:
c1:cd:36:f8:bc:52:48:2c:00:30:5b:60:75:48:60:
28:84:2f:66:d6:1a:c9:4b:91:1a:eb:e3:c3:b2:7c:
aa:b3:89:ba:39:0e:d9:66:d3:ab:1f:85:ce:c1:c5:
58:ef:a4:c2:a7:15:64:4a:b8:73:75:34:a5:e7:c0:
85:38:c5:94:9e:5c:a2:85:b0:47:59:8d:69:fe:a9:
39:d5:92:6c:e5:3d:fc:f5:db:71:1a:13:34:a0:64:
81:b7:67:b9:97:6e:56:2d:94:1e:81:f0:a5:50:88:
1c:6a:db:63:00:7e:72:da:b7:1d:14:05:17:30:8d:
a7:ce:10:c0:cb:11:d9:84:0e:4a:84:b1:f2:b7:88:
fd:bc:51:6e:9c:18:e5:d7:7d:85:b2:44:09:64:51:
ee:ec:79:94:5c:5c:2b:47:21:ac:be:b9:2d:f8:74:
96:8f:5b:7b:d5:93:11:a6:52:48:b3:d8:a1:11:68:
67:ba:9b:da:e4:7f:3c:7d:88:12:c6:84:66:f5:31:
81:dd:c7:a5:b5:b3:ed:c1:15:97:1a:7c:8e:93:ab:
58:1a:24:cf:8e:e1:71:de:a0:7b:0c:58:a2:2c:23:
d5:e4:92:5a:16:63:58:20:f8:f3:fc:b5:ce:e1:50:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0E:B7:6F:B4:43:60:AC:9D:C5:0F:35:6A:55:3E:49:3F:23:AA:A1
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6e:30:18:bf:2c:07:9b:67:69:ee:d8:b6:bc:e7:ce:c2:17:
3f:8b:03:a5:b6:bb:2b:67:7a:73:f4:38:0b:04:11:2a:ac:e5:
b8:46:84:55:d4:2f:a6:a2:02:88:c6:64:93:63:50:13:54:20:
10:20:af:df:53:86:a4:00:51:42:1d:e3:43:e9:59:96:18:20:
5b:3c:6d:65:72:9f:31:89:5f:6a:2c:c8:4e:dc:aa:0e:9a:86:
13:82:b8:49:9d:50:c1:46:36:de:0c:ef:5e:ef:57:0b:b6:b7:
1b:45:b8:48:0d:2f:fc:77:89:9c:53:0c:f8:91:10:0f:ed:9e:
15:67:31:89:c4:15:b9:e7:37:f6:19:77:42:22:87:a0:0e:0d:
16:38:c2:40:05:3e:32:34:16:8a:4a:cd:31:00:9c:54:a8:1a:
69:3d:b0:63:9c:36:cf:cb:14:d8:1b:a0:54:8a:9e:98:e4:58:
57:2d:67:6e:64:1e:b3:46:73:f1:7e:c1:f0:a6:ff:07:ee:cf:
06:e4:89:35:fe:04:99:82:8c:88:eb:d1:8a:e0:29:1e:91:6e:
cd:f8:89:e7:03:27:49:28:70:e7:9b:ff:59:49:f3:5c:7c:01:
cc:ca:49:b5:be:c8:b5:19:60:05:d4:fe:13:37:9a:2c:dd:34:
31:bb:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:46:26 2025 by rpki-client